Senior Security Engineer

About the job

Banking hasn't changed much in decades. We're changing that. One product at a time.

Lunar is a Nordic challenger bank building the future of financial life with AI at the core. Our engineers, designers, and product people work on problems that actually matter. Making money simpler, smarter, and more rewarding for a million of registered users across the Nordics.

Fully licensed and founded in 2015, with offices in Copenhagen, Aarhus and Stockholm.

We move fast, we build with purpose, and we're just getting started.

As a Senior Security Engineer, you will be part of Squad Gravity, our dedicated security team based in Aarhus. You will own and drive security across a broad surface; including cloud and endpoint protection, enabling secure use of AI solutions, incident response, compliance, and detection engineering. You won't just advise from the sidelines. You will be hands-on, building the defences, responding to real threats, and shaping the security posture of a Nordic fintech going to the moon. Squad Gravity is part of the innovation, not the typical "department of no" that you see in other organisations. Our mission statement is “Building Trust at Scale through Frictionless Security”. As such, your goal is to enable secure innovation and fast pace with smart use of AI and modern cloud technology.

What will you do?

Squad Gravity is responsible for security operations, compliance, and resilience at Lunar. The scope is wide, and you will contribute across several areas:

• Cloud, Infrastructure & CI/CD: Engineer and harden security across AWS, Kubernetes and Github Actions.
• AI & Automation: Help us understand and address the security implications and explore how AI can make our own security work smarter.
• Security Findings & Remediation: Assess and remediate security findings across AWS, Kubernetes, and employee endpoints - spanning critical vulnerabilities such as React2Shell to RBAC privilege escalation vulnerabilities.
• Compliance & Policy: Contribute to gap analysis of regulation or compliance frameworks such as DORA, GDPR, AI Act, ISO27001 and similar.
• Penetration Testing: Coordinate external penetration tests, communicate findings to stakeholders, and drive remediation of results.

Who are you?

You are someone who thrives in a role where no two weeks look the same. You are equally comfortable digging into a Kubernetes RBAC vulnerability as you are drafting an encryption policy or investigating a phishing campaign. You take ownership, communicate clearly, and know when to go deep versus when to move fast.

We know this is a broad role and we don't expect you to be an expert in everything from day one. What matters is that you are strong in some of these areas and genuinely curious to grow in the others. As such, if you are a strong DevSecOps/SRE/Platform Engineer profile, with an interest in Security and Security Engineering, don't hesitate to apply.

We are looking for people with the following experience:

• Cloud Engineering and Security: Hands-on experience with AWS and Kubernetes. You should be comfortable using technologies like Terraform for AWS and GitOps for Kubernetes. Furthermore, you should be well-versed in designing secure cloud-native applications using modern best practices.
• AI Readiness: You don't need to be an AI engineer, but you have experience with Claude Code and working with agentic solutions. You understand how these AI tools work and how they change the security landscape.
• Identity & Access Management: Experience with SAML, OIDC and similar protocols and technologies in a corporate environment. Experience with RBAC, least privilege access models, and identity management in cloud environments.
• Communication & Soft Skills: You can explain security concepts to both engineers and non-technical stakeholders. You have strong soft skills and know how to influence others effectively without being seen as the typical "security gatekeeper".
• Experience: 3+ years in Security Engineering, DevSecOps, SRE, Platform Engineering, or a similar role, ideally in a tech-driven or regulated environment.

What you get.

• 4 days in the office. We're a team that builds together, thinks together, and moves together. Showing up is part of how we work.
• A well-equipped workspace. You’ll have a modern computer and a comfortable desk setup. We want you to have the tools you need to do your best work.
• Pension, health insurance, and enhanced parental leave. From your financial future to your family moments. We've got you covered.
  

Are you ready to join the journey? Apply now and let's find out more!

While you hold on tight for us to get back to you, curious to see what we’re up to? Follow us on LinkedIn for business announcements and releases 📢, check out our Instagram for an inside scoop on what it’s like to work here .

Depending on the regulations in the country where you will be employed, we will ask to see or obtain information about your criminal record. Please note that our employment is conditional upon you not being registered in RKI (Ribers Kredit Information).

We welcome applications from candidates of all backgrounds. If you need any adjustments during the recruitment process, please let us know